CVE-2021-21935

CVE-2021-21935 maps to multiple SQL-injection vulnerabilities in Advantech R-SeeNet (device_list and related filters). Root cause is improper input handling (dynamic SQL via various filter parameters such as host_alt_filter2, desc_filter, prod_filter, etc.), allowing authenticated users (or CSRF ...

Advantech R-SeeNet

1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Low attack complexity Vendor: Advantech Equipment: R-SeeNet Vulnerabilities: SQL Injection, Improper Privilege Management 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow authenticated users to perform a local privilege...